Multistage authority management method for cloud storage enciphered data sharing

Abstract

The invention relates to a multistage authority management method for cloud storage enciphered data sharing. The methods such as attribute based encryption, access control and authority management are used for providing a reliable method for access and multistage authority management of a shared cipher text in the cloud storage environment. Through mixing encrypt system, the multistage authority management method for cloud storage enciphered data sharing comprises steps: firstly applying a symmetric encryption algorithm to encrypt data, and generating a content cipher text; then adopting the attribute based encryption to encrypt according to different authority information, and generating an authority cipher text; adopting the attribute based encryption scheme to encrypt a symmetric key and the authority cipher text, regarding the symmetric key and the authority cipher text as a file header of the content cipher text, and generating a final cipher text. The multistage authority management method for cloud storage enciphered data sharing has the advantages of being convenient to achieve, strong in user information protectiveness, fine in authority control grit and the like. Under the premise that a server is not credible, the flexible and extensible authority management to the shared enciphered data is supported, the privacy and the security of the user data and authority information are effectively ensured, and the multistage authority management method for cloud storage enciphered data sharing has good practical value and wide application prospect in the cloud storage field.

Description

technical field

[0001] The present invention relates to a cloud storage-oriented multi-level authority management method for encrypted data sharing, in particular to theoretical research on attribute-based encryption, access control, and authority management, and supports flexible and fine-grained access control and access control for shared encrypted data. A rights management method belongs to the technical field of information security. Background technique

[0002] With the development of Internet and distributed computer technology, there are more and more demands for data sharing and processing in a distributed and open computing environment. In order to solve the problem of data privacy protection, a common method is to encrypt the data by the user and store the encrypted ciphertext on the server. How to share encrypted data becomes an urgent problem to be solved when the stored encrypted data has reached a large scale. Users need to formulate flexible access control...

Images